Privacy Policy

PRIVACY POLICY

The purpose of this Privacy and Cookie Policy is to inform users (hereinafter: individual or you) of the website www.kiddo-world.si ("website") about the purposes and legal basis for processing personal data by the company ALMA TRADE D.O.O. Business Zone A 10, 4208 Šenčur, email address: info@kiddo-world.com (hereinafter: ALMA TRADE, company, we or controller).

All personal data is processed, stored and protected in accordance with applicable legislation governing the protection of personal data, particularly in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: GDPR) and the Personal Data Protection Act (Official Gazette of the Republic of Slovenia, No. 163/22, hereinafter: ZVOP-2). Please read our Privacy Policy carefully to understand how we protect your privacy.

By submitting your personal data, you declare that you have read our Privacy and Cookie Policy and are aware of the processing methods and legal bases for processing personal data. If you do not agree with the processing methods, please do not submit your personal data to us.

BASIC CONCEPTS

Below are described the basic concepts that you encounter when reading our Privacy and Cookie Policy:

Personal data: personal data is information that identifies an individual as a specific or identifiable individual. An individual is identifiable when they can be determined directly or indirectly, particularly by reference to an identifier such as name, identification number, location data, online identifier, or by reference to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the individual.

Data subject: is a specific or identifiable natural person whose personal data is processed by the controller, who is responsible for the processing.

Processing of personal data: means any operation or set of operations performed on personal data, such as collection, acquisition, entry, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, anonymization, erasure or destruction of personal data. Processing may be manual or automated.

Restriction of processing of personal data: is the marking of stored personal data with the aim of limiting their processing in the future.

Profiling: means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to an individual, in particular to analyze or predict aspects concerning the individual's work performance, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

Automated decision-making: means a decision based solely on automated processing (including profiling), which produces legal effects or similarly significantly affects the individual.

Anonymization: means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

Controller of personal data: is a natural or legal person or other body which, alone or jointly with others, determines the purposes and means of the processing of data or a person determined by law, who also determines the purposes and means of processing.

Processor of personal data: is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

User of personal data: is a natural or legal person, public authority, agency or other body to whom personal data is disclosed, regardless of whether it is a third party or not. Public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as users; the processing of such data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.

Third party: is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

Consent of the individual: the consent of the individual to whom the personal data relates means any freely given, specific, informed and unambiguous indication of the individual's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

CONTROLLER AND AUTHORIZED PERSON FOR PERSONAL DATA PROTECTION

The controller of personal data is ALMA TRADE d.o.o., Business Zone A 10, 4208 Šenčur Slovenia, EU, Registration Number: 8102279000, VAT Number: SI 20992882

We have appointed an authorized person for personal data protection in the company, whose email address is: info@kiddo-world.com.

PURPOSE OF PROCESSING AND LEGAL BASES FOR PROCESSING DATA

• Processing based on consent

We process personal data based on the clear and unambiguous consent of the relevant individuals for the following purposes:

• completion of contact form,

• participation in promotional activities published on the website,

• consent for use of telephone number and email address for sending information and offers about products and services,

• sending newsletters,

• protection of our products and services.

• Processing based on contract

Processing based on contract includes the following processing:

• submission of order for our products and/or services,

• conclusion and execution of contract,

• informing customers about successful order,

• execution of services,

• resolution of complaints.

• Processing based on legitimate interest:

If circumstances require, we process personal data based on legitimate interest for the purposes of:

• response to your inquiry about products and/or services,

• measuring satisfaction with purchase, via email or telephone communication,

• email communication based on your initiation of online purchase process,

• if you have added selected products to the shopping cart but did not complete the purchase, we occasionally send email messages related to your uncompleted purchase, with the aim of attempting to complete the purchase or providing assistance and information in this regard,

• informing about new products and services (direct marketing), based on point (f) of Article 6(1) of the GDPR or Article 226 of the Electronic Communications Act (ZEKom-2),

• optimization of the page,

• ensuring IT systems security,

• prevention of abuses and/or fraud.

• Processing based on law

Based on law and in accordance with relevant legislation, we process personal data:

• in connection with your order for legitimate purposes (e.g., reasons of tax legislation).

DATA WE COLLECT

We collect the following types of data:

Voluntarily provided data

For the needs of business, response to inquiry, participation in promotional offers and processing of your order of products/services, we collect the following personal data, which we obtain if you explicitly provide them:

• first and last name,

• delivery address,

• email address,

• telephone number,

• other data you provide.

The provision of personal data is a condition for the use of our services or for ordering products, as without the necessary personal data we cannot execute the order.

Automatically generated data

Data about the device or other log data is obtained automatically when you use our website.

From every visitor we collect anonymous data for monitoring traffic and correcting errors. This information helps us understand who uses our website, which serves us for improving and marketing our website, especially our online products and services. We collect data such as IP address, web requests, data sent as response to such requests, browser type, browser language, timestamp for request and other anonymous statistical data that includes the use of our website. This information by itself cannot be used to identify or contact you. With personal data we can automatically combine collected and other, non-personal data. In this case, we will treat the combined data as personal data in accordance with this Privacy Policy, and we will use it for marketing purposes.

We are not responsible for the accuracy of the data you enter.

TRANSFER OF PERSONAL DATA TO THIRD PARTIES OR TO THIRD COUNTRIES

We do not engage in the sale of your personal data. Your personal data may be shared with third parties only as specified in this Privacy Policy.

We share personal data with third parties:

• Based on your consent, we may share your personal data with those third parties for whom you have provided consent.

• With our service providers, business partners and executors who provide services on our behalf or whom we use to support our business, such as:

• online payment platform via provider Mollie,

• with our accounting service,

• provider for management and generation of invoices or offers,

• providers of marketing activities.

• To law enforcement authorities we may report all activities that we reasonably believe are unlawful, or that we reasonably believe may assist in a law enforcement investigation against unlawful activity. Furthermore, we reserve the right to transfer your personal data to law enforcement authorities if we determine, at our sole discretion, that either you are violating the rules of our Privacy and Cookie Policy, or that by publishing your personal data we can protect the rights, property or safety of ourselves or others. We will disclose only those personal data that law enforcement authorities require on a legal or legally obtained basis for each specific, particular case.

• Your personal data may be disclosed when required by law, regulations or official orders, to protect the safety of any person from death or serious bodily injury, to prevent fraud or abuse of products and/or services or users, or to protect our proprietary right. We will disclose personal data to government officials or third parties on the basis of court judgments or administrative body decisions or other binding act. We will disclose personal data that the aforementioned bodies require on a legal or legally obtained basis for each specific, particular case.

We disclose your personal data if necessary to fulfill our obligations to you and specifically in the least possible extent.

Collected personal data is not transferred to third countries. Your data is processed only within the area of the European Union. In case your data will be transferred to third countries, you will be informed about this.

CONSENT OF A MINOR

We are committed to protecting children's online privacy and internet safety. We do not offer products and services to children or knowingly collect or require personal data from children under 15 years of age.

Any communication that we reasonably and justifiably believe comes from a child under 15 years of age will not be retained. We encourage parents or guardians of children under 15 years of age to regularly check and monitor whether children use email and other activities online.

We use all available technology and strive to verify whether the holder of parental responsibility for the child has provided or approved consent.

LINKS TO OTHER WEBSITES

Our websites may contain links to third party websites. These websites have their own privacy policies that you must read, as we are not responsible for them.

• Links to social media

Our websites contain links to social networks (social plugins), into which we have included links that redirect you to these social networks when you click on their icons. The processing of personal data obtained by social networks when you click on the plugin and are redirected to the social network is carried out by the social networks listed below and in accordance with their privacy policies, which are available at:

• Facebook: processing of personal data is carried out by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA; data protection statement is available at https://www.facebook.com/policy.php ,

• Instagram: processing of personal data is carried out by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA; data protection statement is available at: https://help.instagram.com/155833707900388 ,

• Pinterest: processing of personal data is carried out by Pinterest, Inc. You can contact Pinterest Inc. at 651 Brannan Street, San Francisco, CA 94107, USA; data protection statement is available at: https://policy.pinterest.com/sl/privacy-policy ,

• Snapchat: processing of personal data is carried out via Snap B.V., Keizersgracht 165, 1016 DP, Amsterdam, The Netherlands; privacy statement is accessible at: https://values.snap.com/en-GB/privacy/privacy-policy ,

• TikTok: processing of personal data is carried out via TikTok Information Technologies Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland; privacy statement is accessible at https://www.tiktok.com/legal/page/eea/privacy-policy/en .

AUTOMATED DECISION-MAKING AND PROFILING

The individual's personal data is not subject to automated decision-making, nor is it subject to profiling.

HOW WE PROTECT DATA

We value that you trust us and share your personal data with us. We are committed to protecting them, therefore we adopt appropriate technical and organizational measures to ensure a high level of data protection (some of the measures we implement are: use of firewalls and data encryption, physical access control – protection of premises and IT equipment and control over authorizations for access to information with password system for authorization and identification of users).

We limit access to personal data to our employees, service providers and agents who must know them to be able to develop or improve our services.

Please understand that our website offers links to other websites whose owners and/or controllers we are not. Your use of these third party services is completely optional. We are not responsible for the content and/or practices of third parties.

MANAGEMENT OF PERSONAL DATA AND OPT-OUT

Personal data can be updated or removed or you can unsubscribe at any time.

• Updates: If you still wish to use our products and services and change your relevant personal data (name, email, postal address, telephone number, etc.), please inform us at info@kiddo-world.com.

• Deletion of personal data: If you wish to completely remove your data from our databases, please send us a deletion request to info@kiddo-world.com.

• Unsubscribe (opt-out): If you do not like receiving emails or other marketing materials, you can unsubscribe at any time by clicking the "unsubscribe" link in any marketing email you receive from us. It would sadden us if you unsubscribe, but we respect your privacy.

Processing of the request that you send to info@kiddo-world.com may take up to 10 days. After this time, the request will be examined and if it meets the conditions, put into effect.

When we receive your withdrawal of consent, we will cease processing your personal data and delete them. We will inform you that your withdrawal has been taken into account.

INDIVIDUAL'S RIGHTS

In accordance with the provisions of the GDPR, the individual has the right of access to personal data, right to rectification, right to erasure ("right to be forgotten"), right to data portability, right to request restriction of processing of personal data, right to object and right to lodge a complaint with the supervisory authority.

When exercising rights or obtaining additional information, you can contact the email address: info@kiddo-world.com. A response to your request will be given within 10 days and in accordance with the GDPR.

When there is justified doubt regarding the identity of the individual submitting a request in connection with any of their rights, we may require the provision of additional information necessary to confirm the identity of the individual to whom the personal data relates.

If the requests of the individual to whom the personal data relates are manifestly unfounded or excessive, in particular because of their repetitive character, we may charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested, or refuse to act on the request.

RIGHT OF ACCESS TO DATA

The data subject has the right to obtain from us confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:

• the purposes of the processing;

• the categories of personal data concerned;

• the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;

• where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

• the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;

• the right to lodge a complaint with a supervisory authority;

• where the personal data are not collected from the data subject, any available information as to their source;

• the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

Upon request by the data subject, we provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, we may charge a reasonable fee based on administrative costs.

RIGHT TO RECTIFICATION

The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

RIGHT TO ERASURE ("RIGHT TO BE FORGOTTEN")

The data subject has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

• the data subject withdraws consent on which the processing is based and where there is no other legal ground for the processing;

• the data subject objects to the processing based on the legitimate interest of the controller and there are no overriding legitimate grounds for the processing;

• the data subject objects to the processing for direct marketing purposes;

• the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject; this concerns data in relation to offering of information society services collected inappropriately from a child who cannot provide such data in accordance with applicable legislation.

Where the data has been made public, we take reasonable measures, including technical, to inform other controllers processing the personal data that the data subject has requested the erasure of any links to such personal data or copies of them.

RIGHT TO RESTRICTION OF PROCESSING

The data subject has the right to obtain from the controller restriction of processing where:

• the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;

• the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;

• the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims;

• the data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject.

RIGHT TO DATA PORTABILITY

The data subject has the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and has the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

• the processing is based on consent or on a contract; or

• the processing is carried out by automated means.

RIGHT TO OBJECT

The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on legitimate interests, including profiling based on those provisions. We shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims. Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where direct marketing is based on consent, the right to object may be exercised by withdrawing the given personal consent.

Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, if such decision is not necessary for entering into, or performance of, a contract between you and us, or is not authorized by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or is not based on your explicit consent.

RIGHT TO LODGE A COMPLAINT REGARDING PROCESSING OF PERSONAL DATA

The individual may communicate any complaint regarding the processing of personal data to the email address: info@kiddo-world.com or by post to the address ALMA TRADE D.O.O., BUSINESS ZONE A 10, 4208, ŠENČUR, SLOVENIA

In case of personal data breach, we will inform the competent supervisory authority, unless the breach is unlikely to result in a risk to the rights and freedoms of natural persons. Where in case of breach there is suspicion of a criminal offense, we will inform the police and/or the competent prosecution authority.

Where it is a breach that may result in a high risk to the rights and freedoms of natural persons, we will immediately inform the data subject of the breach or, where this is not possible, without undue delay.

If the data subject has exercised the right of access at the controller and, after receiving the decision, considers that the personal data received are not the personal data requested or that he or she has not received all the requested personal data, he or she may submit a reasoned complaint to the controller (ALMA TRADE) within 15 days before lodging a complaint with the Information Commissioner. We will decide on the complaint as a new request within five working days.

If the data subject considers that his or her rights or personal data protection rules have been violated, he or she may complain to the competent state body: Information Commissioner of the Republic of Slovenia (Zaloška 59, 1000 Ljubljana, telephone: 01 230 97 30, fax: 01 230 97 78, email: gp.ip@ip-rs.si).

RETENTION PERIOD OF PERSONAL DATA

We will retain the individual's personal data for as long as is necessary to achieve the purpose for which the personal data was collected and further processed.

Some data we obtain through the use of cookies and other similar technologies by analyzing your behavior on our website and response to emails and from third parties whose cookies have been loaded on your device with your consent (social media providers, etc.).

Data that we process based on legitimate interest or for the purpose of executing measures at your request before conclusion of a contract, we will retain for a maximum of five years from when the purpose of our mutual communication is fulfilled or until the expiration of limitation periods for any claims.

In case applicable sectoral legislation (e.g., tax legislation) provides mandatory retention periods for personal data, we delete personal data after the expiration of the period prescribed by law.

COOKIES

Cookies are small text files that websites store on the devices of individuals accessing the internet. Their storage is under the complete control of the individual, as they can limit or disable the storage of cookies in the browser they use. Cookies perform numerous functions – they enable tracking of website visits, enable various campaigns and discounts, through cookies information is also stored about whether the individual is entitled to, for example, certain discounts or benefits.

Cookies enable a convenient way of maintaining fresh and appropriate content in accordance with the interests and preferences of website visitors. Based on statistical data about website traffic, which cookies also enable, we can evaluate the effectiveness of the design of our web pages, as well as the appropriateness of the type and number of advertisements we offer on the website.

Consent to the installation of cookies is not required for necessary cookies. These enable the normal functioning of the website. Through these cookies basic use of the website is possible. Without these cookies the website does not function normally or does not function at all, therefore they are installed even when the individual refuses the installation of cookies.

How do I change my cookie settings?

Cookie settings can be changed at any time by clicking on the "________" icon. You can then set the available sliders to "On" or "Off" and then click "Save and close".

WHAT COOKIES DO WE USE?

MANAGEMENT AND DELETION OF COOKIES

If you wish to change the way cookies are used in your browser, including blocking or deleting them, you can do so by appropriately changing your browser settings. For cookie management, most browsers allow you to accept or reject all cookies, accept only a certain type of cookie, or warn the individual that the website wishes to store a cookie. Cookies stored by the browser can be easily deleted. If you change or delete your browser's cookie file, change or upgrade your browser or device, you may need to disable cookies again. The procedure for managing and deleting cookies differs from browser to browser.

CHANGES TO THE PRIVACY AND COOKIE POLICY

We reserve the right to update, change or replace any part of the Privacy and Cookie Policy at our sole discretion by posting the update or change on the website without prior notice. Any change is valid from the date of public posting of the changed Privacy and Cookie Policy on our website.

Published on: 11.12.2025

Download PDF document